My avast alarm is going off every 6-7 seconds warning me that a “threat has been detected” and malware blocked. The “object” changes every time but the “process” is always identified as C:\Windown\System32\svchost.exe. I’ve run a full scan with (free) avast and malwarebytes but they’ve found nothing. MBAM and OTL ogs are attached.
I tried also running aswmbr but it crashed my computer. My OS is Windows 7 running on a Dell Inspirion n5110 laptop. I generally use IE.
Any help you can offer would be greatly appreciated!
Edit: Ran aswmbr in safe mode as suggested below and it worked like a charm. Log is now also attached.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Select both shortcut and additions at the bottom
[*]Press Scan button.
OK I can see the bad boy now, I will need to use a different tool to start the removal process I will need two runs with this. The first will be for data gathering, once I have that we will then remove it
Download and Install Combofix
Download ComboFix from one of the following locations: Link 1 Link 2
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks
OK, I followed your instructions and downloaded & ran combofix. The threat is still being detected and going off regularly (every few seconds). The only oddity I’ve noticed is that my IE browser won’t go to Google or Youtube now.
WARNING:Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article and this article.
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disableJava in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
I ran DelFix and everything is cleaned up. I just wanted to say thank you, again, for all of your help. I’m so grateful to have my laptop running smoothly again. You’re lifesavers!
